The loss of an unencrypted flash drive exposed sensitive patient information. The flash drive contained name, date of birth, weight, gender, telephone number, URMC internal medical record number, orthopaedic physician name, date of service, diagnosis, diagnostic study, procedure, and complications. The flash drive is believed to have been destroyed after ending up in the medical center laundry. It was not found.